Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/323830343a373131303a373130303a3a2f34302d3430203d3e20323730373634.roa
File:                     323830343a373131303a373130303a3a2f34302d3430203d3e20323730373634.roa (raw, json)
Hash identifier:          CZTU4zn9CCsYj89eeJ8BBwa9I756obrpRfcHT6070sE=
Subject key identifier:   95:60:64:0C:90:12:70:B0:57:00:DF:28:12:40:97:97:B0:C8:02:30
Certificate issuer:       /CN=677267BB5B39E407382A7BBF001BEE00278BE380
Certificate serial:       69C31B1329A349332E124F4D44AE07CF938E7AFA
Authority key identifier: 67:72:67:BB:5B:39:E4:07:38:2A:7B:BF:00:1B:EE:00:27:8B:E3:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/677267BB5B39E407382A7BBF001BEE00278BE380.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/323830343a373131303a373130303a3a2f34302d3430203d3e20323730373634.roa
Signing time:             Fri 31 May 2024 22:40:38 +0000
ROA not before:           Fri 31 May 2024 22:35:38 +0000
ROA not after:            Fri 30 May 2025 22:40:38 +0000
asID:                     270764
IP address blocks:        2804:7110:7100::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/677267BB5B39E407382A7BBF001BEE00278BE380.crl
                          rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/677267BB5B39E407382A7BBF001BEE00278BE380.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/677267BB5B39E407382A7BBF001BEE00278BE380.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 23:34:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:c3:1b:13:29:a3:49:33:2e:12:4f:4d:44:ae:07:cf:93:8e:7a:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=677267BB5B39E407382A7BBF001BEE00278BE380
        Validity
            Not Before: May 31 22:35:38 2024 GMT
            Not After : May 30 22:40:38 2025 GMT
        Subject: CN=9560640C901270B05700DF2812409797B0C80230
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:3c:46:2a:1e:e5:aa:71:a9:bb:ed:dc:f4:d5:
                    d8:8a:5e:2d:cc:14:25:6a:88:91:39:0d:94:61:1a:
                    fc:83:24:4e:00:42:b5:a1:a8:15:71:17:71:06:03:
                    20:0d:66:55:a4:ba:d8:14:2b:d0:54:96:26:f2:98:
                    d5:b9:39:18:7d:76:8a:91:2a:37:94:7a:1c:96:d4:
                    01:44:72:05:73:82:21:03:a7:60:e3:c0:7a:57:ff:
                    2d:c2:3c:28:40:42:c2:c7:6a:91:82:ea:e6:d0:a4:
                    b8:93:1b:79:89:79:f5:b1:b5:94:c0:b7:fe:7c:2e:
                    f4:86:0a:71:ef:d2:b5:7e:05:e3:aa:ea:19:ff:39:
                    dc:a2:e5:00:d1:41:81:0a:db:b2:b6:32:0b:8e:62:
                    86:0f:52:92:40:0c:37:67:c3:94:c9:38:2c:9c:5e:
                    1d:c5:bc:72:3e:69:f1:a2:b5:af:9f:23:7b:36:fb:
                    b0:3a:80:40:8b:ad:48:0c:6d:dd:43:98:9d:b2:2e:
                    5f:d4:3d:43:18:1e:9d:50:17:14:23:bc:d7:ad:1f:
                    57:47:d5:0d:18:bf:9f:64:7a:f3:54:af:89:63:2e:
                    20:6b:e3:df:00:44:31:89:4f:49:7b:8d:d1:b6:e1:
                    a3:9e:23:5b:5d:30:5d:1f:af:89:f4:93:a6:4e:6e:
                    12:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:60:64:0C:90:12:70:B0:57:00:DF:28:12:40:97:97:B0:C8:02:30
            X509v3 Authority Key Identifier:
                keyid:67:72:67:BB:5B:39:E4:07:38:2A:7B:BF:00:1B:EE:00:27:8B:E3:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/677267BB5B39E407382A7BBF001BEE00278BE380.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/677267BB5B39E407382A7BBF001BEE00278BE380.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/323830343a373131303a373130303a3a2f34302d3430203d3e20323730373634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7110:7100::/40

    Signature Algorithm: sha256WithRSAEncryption
         65:34:cb:03:2a:e7:fc:a4:20:67:b4:20:24:27:db:93:ff:ac:
         c4:96:8d:4a:30:d3:f2:fc:39:dc:df:e4:bd:99:3f:58:9c:0b:
         cb:1b:4b:0e:b1:a8:66:71:ae:bc:8f:8d:37:de:1c:8e:a9:33:
         64:46:50:9a:2b:89:b0:c2:6b:a6:20:99:76:91:5d:b7:08:9f:
         49:e2:16:b0:f9:35:1c:59:eb:e6:f4:c1:40:e0:8c:e6:09:07:
         c3:cf:5d:3e:54:54:a1:ac:37:e9:38:ab:4f:29:00:bb:6c:39:
         4f:cf:bc:20:c1:19:e4:75:02:b5:09:b8:44:45:8d:10:ed:89:
         fe:ca:f8:25:44:89:d1:40:a2:64:95:1a:0d:a8:df:24:39:ae:
         a3:02:13:f0:81:55:8e:f6:1f:77:ba:2d:b5:95:5c:5f:98:c9:
         92:01:26:4e:04:14:76:3a:63:73:d4:ef:6d:20:04:fa:6e:df:
         7b:b9:c3:f0:b3:b3:7e:59:36:e8:28:61:f2:dd:dd:75:a1:05:
         e6:9c:2d:02:00:94:bb:a8:d0:6c:25:da:5e:4f:4b:79:d3:6f:
         52:fc:9e:98:da:ee:23:76:f8:61:d0:12:e6:00:2e:c4:8b:e3:
         a2:b7:41:8e:79:c3:67:5e:56:f4:85:6a:ed:c9:aa:b4:db:a5:
         3f:85:18:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:33:14 2024 by rpki-client on console-fra.rpki-client.org